This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
File:                     1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json)
Hash identifier:          Sm+pzz0fuT6j6zmz2vlZGYlR9tkY8FZKasF8K8NdTYo=
Subject key identifier:   51:D9:5D:A8:29:01:A5:14:FF:F6:DF:CA:64:1B:C4:FC:C0:5A:B0:AD
Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Certificate issuer:       /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
Manifest number:          0202
Signing time:             Sat 06 Dec 2025 15:38:21 +0000
Manifest this update:     Sat 06 Dec 2025 15:38:20 +0000
Manifest next update:     Sat 13 Dec 2025 15:38:20 +0000
Files and hashes:         1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: dQ65Ua2sYMcZGu/e0YDwQG0nToQyJbQ6Wn1j2YICGUs=)
                          2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: Kqt9mEj0giKftuB2DBO692CGsOF5kZIoQznyePkJFyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
        Validity
            Not Before: Dec  6 15:38:20 2025 GMT
            Not After : Dec 13 15:38:20 2025 GMT
        Subject: CN=69344ded-cb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:a0:af:e5:b6:0b:1b:bc:86:80:8f:56:4b:
                    38:0c:7d:4c:11:21:00:6d:13:b6:eb:cb:f9:d7:1d:
                    d9:ea:e3:d6:0b:01:e9:e5:eb:d6:06:6d:9f:29:34:
                    1a:34:14:b7:f7:d5:53:3e:35:7a:49:15:3d:45:9a:
                    d3:24:61:42:ee:1d:d7:ab:89:0c:39:25:42:a5:e5:
                    e0:1e:1f:86:19:bc:db:b7:74:1a:57:f1:f1:2d:f2:
                    65:8f:51:0c:29:36:6e:c2:3a:f3:8a:88:1f:fa:5d:
                    c7:6b:21:0d:a8:86:5b:8f:00:27:ac:d0:3b:e3:76:
                    ab:1f:e9:c7:9d:b4:47:78:1f:8a:cd:e2:7a:56:33:
                    0f:44:81:5c:40:78:3e:bc:38:d6:c8:46:b7:52:98:
                    eb:af:c9:66:47:a5:6a:47:51:2d:80:0d:de:3e:c1:
                    0b:cd:8a:0e:cc:67:ee:17:7d:6f:e6:8a:6f:66:26:
                    46:0a:16:da:70:8f:fc:1e:9c:e6:ee:61:d8:51:88:
                    a8:07:e4:74:80:ff:81:9c:21:d0:04:72:ea:62:8a:
                    f2:62:0c:bb:53:3c:9b:ec:10:9b:df:19:4e:ac:90:
                    14:74:8d:ca:86:56:c5:3d:e7:44:f1:3b:2e:4f:4d:
                    c7:1c:7a:56:1d:59:2d:22:89:d9:0f:e7:c9:67:fc:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D9:5D:A8:29:01:A5:14:FF:F6:DF:CA:64:1B:C4:FC:C0:5A:B0:AD
            X509v3 Authority Key Identifier:
                keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:de:9f:57:d0:91:3e:d9:4f:9e:86:37:c1:a9:a5:a8:7f:
         2b:6a:42:b3:47:e6:7c:86:32:d7:b8:8a:ca:f0:8f:34:62:77:
         40:6a:e4:e5:5d:fe:15:7c:f6:76:ee:df:36:0f:13:66:25:d0:
         62:cf:41:93:fe:be:cb:32:cd:63:32:87:7c:b0:60:16:a3:b0:
         d5:44:49:10:9d:1b:08:4c:eb:c8:86:3d:c0:3b:12:72:e4:3e:
         7b:e3:5d:12:aa:34:ba:b3:91:55:20:f6:d8:61:dc:28:0d:d5:
         63:ff:7d:91:f2:e7:fe:a7:d5:30:ef:b5:8f:bd:84:b7:65:e2:
         a8:b5:e7:af:cd:2a:e0:2f:bc:23:b1:f0:0b:0a:37:2d:b3:72:
         55:26:17:08:bc:a9:41:cf:6f:de:50:ae:5f:2c:c6:7c:a2:25:
         22:92:52:74:ca:e6:77:b4:65:e3:03:a8:30:ab:e1:33:5d:98:
         6a:d6:e9:4f:55:f1:dc:2b:93:82:7b:c2:05:d2:51:28:7b:2b:
         1d:51:92:2a:a2:fe:24:86:69:f3:19:1c:20:fc:70:45:87:f7:
         1d:4f:fc:fc:93:95:68:ec:c7:85:a7:1d:de:b7:fc:6c:85:3e:
         89:77:05:59:3d:78:f7:92:bc:f5:b0:03:46:33:12:ec:5b:d3:
         c0:3f:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:00:23 2025 by rpki-client